77 matches found
CVE-2025-22976
SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module...
CVE-2024-22939
Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the system/article/categoryedit component...
CVE-2024-51376
A Directory Traversal vulnerability exists in yeqifu carRental v.1.0 . A remote attacker can exploit the file/downloadFile.action?path= component to access and obtain sensitive information or confidential data from the underlying system. As of the current reports, no patched version is available....
CVE-2024-51430
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary code via the Test Name parameter on the diagnostic/add-test.php component...
CVE-2024-51430
The SourceCodester Online Diagnostic Lab Management System (version 1.0) is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of user input. A remote attacker can execute arbitrary code by injecting malicious scripts into the Test Name parameter on the diagnostic/add-test.ph...
CVE-2024-48579
SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request...
CVE-2024-48655
An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file...
CVE-2024-48655
The Total.js CMS version v.1.0 is vulnerable to a security flaw that allows a remote attacker to execute arbitrary code . The root cause is located within the func.js file. To mitigate this risk, users are recommended to update the func.js file to prevent code execution or consider disabling the ...
CVE-2024-48655
An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file...
CVE-2024-46532
SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component...
CVE-2024-37869
File Upload vulnerability in Itsourcecode Online Discussion Forum Project v.1.0 allows a remote attacker to execute arbitrary code via the "poster.php" file, and the uploaded file was received using the "$- FILES" variable...
Giftora 1.0 Cross Site Request Forgery
============================================================================================================================================= | Title : Giftora V 1.0 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64 bits | | Vendor :...
CVE-2024-40498
SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php...
CVE-2023-50685
An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...
CVE-2023-50685
An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-33292
SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2024-30890
Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component...
CVE-2023-51281
The Customer Support System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability. Authenticated attackers can execute arbitrary web scripts or HTML by injecting a manipulated payload into the firstname , lastname , middlename , contact , or address parameters via the /customer_suppor...